$ rpki-client -vvf rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft File: yZYCtJIcaINWT0smUVwdY-TPNkQ.mft (raw, json) Hash identifier: pD/Auzl6LJCq3VFrzXu0Jp9SFvT4pAgoveR8GglLfAs= Subject key identifier: 27:23:A1:0E:47:42:5C:CA:AD:2E:96:EE:43:CB:C9:DF:E1:A5:FC:8C Authority key identifier: C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 Certificate issuer: /CN=A91E4EF6/serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Certificate serial: 0A8D Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft Manifest number: 119A Signing time: Fri 22 Aug 2025 19:41:09 +0000 Manifest this update: Fri 22 Aug 2025 19:41:09 +0000 Manifest next update: Fri 29 Aug 2025 19:41:09 +0000 Files and hashes: 1: yZYCtJIcaINWT0smUVwdY-TPNkQ.crl (hash: HgMe2Bx9vcBBepJLRdlfcngP85cCeA+wNzazcwTEwXY=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 29 Aug 2025 19:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2701 (0xa8d) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E4EF6, serialNumber=C99602B4921C6883564F4B26515C1D63E4CF3644 Validity Not Before: Aug 22 19:41:09 2025 GMT Not After : Aug 29 19:41:09 2025 GMT Subject: CN=68a8c7d5-c1fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:01:54:e3:a9:04:d8:69:4e:15:d5:ab:dd:f7: 46:29:f6:21:b5:ad:d2:1a:75:30:31:a2:55:68:84: bc:f2:e6:1e:4a:03:72:46:b9:fc:97:21:60:e3:bb: c6:d7:b1:f9:b2:fd:50:13:c1:25:71:f9:4b:49:95: 65:da:0a:d1:6c:34:2b:76:ce:25:9f:51:11:92:e0: 4d:5f:d9:ed:f3:98:ba:d6:86:a8:8d:b9:69:66:20: 5e:2b:58:16:fa:7a:6f:a9:ab:1b:9b:0d:d8:a1:ac: 52:d2:97:b4:5f:b9:15:55:d2:4b:2d:e0:90:37:67: 8b:24:b3:f5:ec:8f:74:f5:73:85:10:43:89:65:9f: b8:9f:36:f3:a7:0c:9e:ab:cc:96:bb:94:b6:73:3c: 20:91:67:68:4c:66:6e:90:1a:05:2c:8e:ab:8d:e2: 0d:6a:b7:d7:7c:ee:de:d8:a7:2d:e9:89:b6:3e:b3: 7e:55:1c:7e:cf:19:7c:77:dd:25:34:b3:c1:25:99: 26:d6:8a:42:79:b6:69:52:bc:4b:6c:0e:ec:0a:48: db:30:03:08:56:5b:d2:4d:7a:08:a7:ab:93:04:e0: ae:66:74:64:db:38:96:90:48:9d:f5:4b:fc:93:9e: 53:6e:7f:38:a2:b4:d1:06:ea:e0:d2:17:68:ca:11: 45:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:23:A1:0E:47:42:5C:CA:AD:2E:96:EE:43:CB:C9:DF:E1:A5:FC:8C X509v3 Authority Key Identifier: keyid:C9:96:02:B4:92:1C:68:83:56:4F:4B:26:51:5C:1D:63:E4:CF:36:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yZYCtJIcaINWT0smUVwdY-TPNkQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E4EF6/9380078E61D611EAB8D0155BC4F9AE02/yZYCtJIcaINWT0smUVwdY-TPNkQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 71:a8:c6:d8:32:c7:b5:55:a0:50:6b:c4:84:ec:04:78:58:66: 0d:2e:7d:3b:60:11:dd:b6:2a:a5:a7:3c:28:2c:0d:85:f4:2b: 95:40:71:4c:62:2f:f7:ea:e0:b3:d9:9a:50:9f:4c:b2:24:8d: cb:cc:e9:b4:bc:40:a3:58:e0:3d:07:f5:b5:19:bc:7c:98:9d: 83:c9:21:e4:79:29:47:54:92:c2:d1:7f:ce:72:4b:f1:3d:d8: e0:09:cb:89:ad:5a:3a:ba:23:5f:ff:fb:ea:86:ab:f0:6b:2d: 99:52:63:f5:f1:9f:f8:f5:0d:94:51:0e:e3:58:fb:96:25:04: 36:e1:c7:33:3f:cb:df:bf:32:7a:93:61:be:8a:46:76:0e:9d: e4:b6:16:07:7a:79:6a:35:f9:b0:3b:d1:3f:53:2a:c9:16:34: 48:85:fb:a8:f4:fb:b0:df:c6:ca:34:13:f2:3d:c6:64:b6:a2: be:a0:59:1a:1d:f4:6d:cf:e1:5c:3f:88:48:71:5c:c1:72:22: f6:32:fe:52:fa:70:1e:23:bf:d2:1e:40:13:97:44:93:15:64: f3:34:03:c5:56:d2:ef:6f:fb:9b:d6:17:94:26:c0:0b:dc:eb: 6c:9e:c5:17:8b:02:b1:de:7d:1e:27:b3:8a:d5:05:58:99:e2: 83:32:8d:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICCo0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RTRFRjYxMTAvBgNVBAUTKEM5OTYwMkI0OTIxQzY4ODM1NjRGNEIyNjUxNUMxRDYz RTRDRjM2NDQwHhcNMjUwODIyMTk0MTA5WhcNMjUwODI5MTk0MTA5WjAYMRYwFAYD VQQDEw02OGE4YzdkNS1jMWZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAywFU46kE2GlOFdWr3fdGKfYhta3SGnUwMaJVaIS88uYeSgNyRrn8lyFg47vG 17H5sv1QE8ElcflLSZVl2grRbDQrds4ln1ERkuBNX9nt85i61oaojblpZiBeK1gW +npvqasbmw3YoaxS0pe0X7kVVdJLLeCQN2eLJLP17I909XOFEEOJZZ+4nzbzpwye q8yWu5S2czwgkWdoTGZukBoFLI6rjeINarfXfO7e2Kct6Ym2PrN+VRx+zxl8d90l NLPBJZkm1opCebZpUrxLbA7sCkjbMAMIVlvSTXoIp6uTBOCuZnRk2ziWkEid9Uv8 k55Tbn84orTRBurg0hdoyhFFqwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCcjoQ5H QlzKrS6W7kPLyd/hpfyMMB8GA1UdIwQYMBaAFMmWArSSHGiDVk9LJlFcHWPkzzZE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFNEVGNi85MzgwMDc4RTYx RDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJTldUMHNtVVZ3ZFktVFBO a1EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3laWUN0SkljYUlOV1Qwc21VVndkWS1UUE5rUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF NEVGNi85MzgwMDc4RTYxRDYxMUVBQjhEMDE1NUJDNEY5QUUwMi95WllDdEpJY2FJ TldUMHNtVVZ3ZFktVFBOa1EubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBxqMbYMse1VaBQa8SE7AR4WGYNLn07YBHdtiqlpzwoLA2F9CuVQHFM Yi/36uCz2ZpQn0yyJI3LzOm0vECjWOA9B/W1Gbx8mJ2DySHkeSlHVJLC0X/Ockvx PdjgCcuJrVo6uiNf//vqhqvway2ZUmP18Z/49Q2UUQ7jWPuWJQQ24cczP8vfvzJ6 k2G+ikZ2Dp3kthYHenlqNfmwO9E/UyrJFjRIhfuo9Puw38bKNBPyPcZktqK+oFka HfRtz+FcP4hIcVzBciL2Mv5S+nAeI7/SHkATl0STFWTzNAPFVtLvb/ub1heUJsAL 3OtsnsUXiwKx3n0eJ7OK1QVYmeKDMo3F -----END CERTIFICATE-----Generated at Sat Aug 23 20:25:30 2025 by rpki-client